intuition-systems[.]info

Analysis of intuition-systems.info indicates that the domain was registered on February 21, 2026 through NiceNIC International Group Co., Limited. The authoritative name servers are mira.ns.cloudflare.com and dexter.ns.cloudflare.com, pointing to Cloudflare’s DNS infrastructure. DNS resolution returns the address 172.67.160.138, which belongs to AS13335 Cloudflare, Inc., located in the United States. The TLS certificate presented is issued by Google Trust Services under the WE1 root, confirming that the site uses a valid HTTPS certificate, a common tactic for increasing credibility. When accessed, the only observable page element is the title “Just a moment…”, and no further content has been captured.

The site is currently marked as offline, and the page title suggests the presence of a JavaScript challenge or redirection step that has not been rendered. Cloudflare Browser Insights and HTTP/3 support are detected, indicating that the service is hosted behind Cloudflare’s edge network. Threat intelligence sources have flagged the domain. It appears in three public blocklists and has been blocked by PhishDestroy, MetaMask, and SEAL. AlienVault OTX lists the domain in a single pulse, and VirusTotal reports that five of ninety‑three scanned scanners flagged it as malicious.

The combination of recent registration, use of a reputable certificate, and inclusion on multiple blocklists aligns with patterns observed in generic phishing infrastructure. Uncertainty remains regarding the specific payload or credential‑harvesting page that may have been served before the domain was taken offline, as the page content beyond the title has not been captured. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any resurgence of the host under the same IP range, and consider adding the IP address to reputation lists. Ongoing observation of Cloudflare‑associated IP blocks for similar registration patterns is recommended.